progandy

This sort of thing is the reason that the kernel has its own cve authority / cna now.

It's interesting, that it would be hard to make a case that there was a "vulnerability" in the ip package. But it seems like this package's entire purpose is input validation so it's kind of weird the dev thinks otherwise.

Yes, input validation, probably for forms. What the Dev disputes is that he cannot see a case where it is used in a security critical way where

1. the input format is unknown and
2. it is essential to know if the IP is public or private.

I don't know how it compares to nsxiv, but imv supports Wayland.

I am shocked that Facebook employees even see this as a vulnerability. I always considered metadata the valuable part of WhatsApp.

In that case you still have the third party bridge https://github.com/emersion/hydroxide

A separate routing table that takes precedence over the one modified by DHCP should works as well I think. Oh, and of course you have to use a vpn that forces its own nameserver or set one manually to prevent redirections.

If you need arm, then you probably have to install libhoudini https://github.com/casualsnek/waydroid_script

There are Browser extension available, i do not know their quality.

There seems to be a Firefox extension that can send downloads and start jdownloader as well

The pkgbuild should not depend on it if you build in x64, that is only a display Problem in the web i think. Firefox should be avle to download its own copy of widevine though.

Glibc-widevine is only needed on arm and the aur comments have a link.